$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa File: 09c0e019-397b-38de-81b2-2590c6a1d473.roa (raw, json) Hash identifier: zU0frvv4rMTU6e7N1RRrRrFpK00CiG4OEzLBrClJr1U= Subject key identifier: BB:1D:14:27:A1:A6:88:1F:BE:CF:C1:06:28:91:EE:A9:31:54:14:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F5918080DE690BD3E540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 63.131.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:91:80:80:de:69:0b:d3:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8d188479-1796-498d-bd66-cc6e287536a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:4a:2b:9f:e7:00:aa:4c:dc:b3:b8:69:cb: 39:00:58:01:69:71:c7:f5:00:fd:e9:b3:44:0e:ad: 0e:b9:93:f5:69:70:c8:16:c2:46:d6:e7:c9:08:5d: f1:e1:01:af:02:32:3f:48:0f:5d:54:f9:ac:84:6a: d2:fa:ea:95:50:b3:e6:a8:f5:b1:7c:67:c6:d3:46: c3:2e:da:c4:57:4e:99:68:73:bb:c2:70:02:21:9b: 0e:72:f2:0e:9d:77:0e:f2:c8:3a:5a:d6:84:f0:c3: 6a:97:bf:a0:de:a4:e4:09:e0:1c:9b:c3:d2:ec:a9: e5:66:99:ca:c9:d5:c0:a5:4f:7f:eb:cc:dd:58:c2: 55:06:1e:81:a4:f1:89:2d:31:c4:50:05:85:0d:6a: ed:8f:e9:f0:62:cd:06:6c:3a:5b:43:fc:ad:89:61: 59:ff:55:fb:db:90:c8:3f:cf:d4:87:ec:3d:2a:83: 12:10:42:dd:6a:3a:1e:e6:11:4f:21:eb:88:e5:0e: 57:57:4e:50:4d:d0:fd:69:00:cd:c2:b2:9c:a0:04: 2e:74:ce:fb:21:1e:34:e7:8e:d1:94:ce:a4:c5:41: 09:f5:da:fc:82:ac:42:dc:9f:19:ec:bc:f7:5e:b4: 87:76:47:12:d4:67:1f:0b:6b:74:99:aa:38:d7:4b: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:14:27:A1:A6:88:1F:BE:CF:C1:06:28:91:EE:A9:31:54:14:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.131.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9c:fa:04:fa:c1:86:51:7e:0a:47:0f:7e:6a:af:09:c8:4e: ad:9a:3b:1b:ea:42:3f:bc:dd:07:e8:1d:47:66:45:08:06:f8: a8:c9:dd:ee:53:0a:bd:af:25:24:98:7f:4f:59:17:9e:8f:80: 9e:e7:b0:53:f9:96:0d:91:a9:3d:ca:db:3c:37:42:64:27:51: 83:79:e0:db:45:7b:97:3b:d7:cc:6f:22:6e:3d:87:74:b3:5b: ab:6a:af:8b:6a:e6:89:2c:3a:c5:5c:a3:55:58:ce:d4:ec:ac: 0d:17:7e:77:85:e6:47:a1:20:f7:05:3a:7f:96:ea:10:b7:3b: a1:0c:e2:3f:f1:18:18:76:1b:4c:ee:f0:51:2c:ed:35:ef:b8: 8e:b1:29:e1:3a:53:42:2b:9c:19:f8:83:ed:48:3a:12:ad:29: 70:30:00:ff:67:16:ca:79:8c:b9:8e:59:e1:ae:c8:b1:53:c7: a9:3e:a1:2f:01:74:d5:44:a9:e3:7b:75:0e:84:52:5f:58:50: dd:53:b4:12:ff:19:7c:48:83:4a:5e:59:2d:a4:1d:34:89:f5: 98:b1:f1:89:73:8d:c2:68:a7:50:0d:76:6a:e6:da:d1:87:60: 3a:cc:77:26:e8:fa:7e:90:74:41:23:82:19:04:8b:e4:ed:f3: 45:4a:5f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPWRgIDeaQvT5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGQxODg0NzktMTc5Ni00OThkLWJkNjYtY2M2ZTI4NzUzNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgxKK5/nAKpM3LO4acs5AFgBaXHH9QD96bNE Dq0OuZP1aXDIFsJG1ufJCF3x4QGvAjI/SA9dVPmshGrS+uqVULPmqPWxfGfG00bD LtrEV06ZaHO7wnACIZsOcvIOnXcO8sg6WtaE8MNql7+g3qTkCeAcm8PS7KnlZpnK ydXApU9/68zdWMJVBh6BpPGJLTHEUAWFDWrtj+nwYs0GbDpbQ/ytiWFZ/1X725DI P8/Uh+w9KoMSEELdajoe5hFPIeuI5Q5XV05QTdD9aQDNwrKcoAQudM77IR40547R lM6kxUEJ9dr8gqxC3J8Z7Lz3XrSHdkcS1GcfC2t0mao410saPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsdFCehpogfvs/BBiiR7qkxVBRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDljMGUwMTktMzk3Yi0z OGRlLTgxYjItMjU5MGM2YTFkNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHP4MAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSc+gT6wYZRfgpHD35qrwnITq2aOxvqQj+83QfoHUdmRQgG+KjJ3e5T Cr2vJSSYf09ZF56PgJ7nsFP5lg2RqT3K2zw3QmQnUYN54NtFe5c718xvIm49h3Sz W6tqr4tq5oksOsVco1VYztTsrA0XfneF5kehIPcFOn+W6hC3O6EM4j/xGBh2G0zu 8FEs7TXvuI6xKeE6U0IrnBn4g+1IOhKtKXAwAP9nFsp5jLmOWeGuyLFTx6k+oS8B dNVEqeN7dQ6EUl9YUN1TtBL/GXxIg0peWS2kHTSJ9Zix8YlzjcJop1ANdmrm2tGH YDrMdybo+n6QdEEjghkEi+Tt80VKX2Q= -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:15 2025 by rpki-client